Libmicrohttpd vulnerabilities

2 known vulnerabilities in Libmicrohttpd from GNU. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  GNU libbmicrohttpd: Heap-based Buffer Overflow

  CVE-2025-62689Nov 10, 2025GNU Project

  NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker

• 8.7 High severity

  GNU libbmicrohttpd: NULL Pointer Dereference

  CVE-2025-59777Nov 10, 2025GNU Project

  NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker